sql-code-review

Identify security vulnerabilities, performance bottlenecks, and maintainability issues in SQL code.

Updated Mar 6, 2026
One-click install
npx skills add https://github.com/pczhao1210/reuseable-agents-and-skills --skill sql-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sql-code-review
Source: https://github.com/pczhao1210/reuseable-agents-and-skills/tree/main/.agents/skills/sql-code-review
Command: npx skills add https://github.com/pczhao1210/reuseable-agents-and-skills --skill sql-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill performs a comprehensive SQL code review focusing on security, performance, maintainability, and best practices across multiple database systems (MySQL, PostgreSQL, SQL Server, Oracle).

Core Features & Use Cases

  • Security analysis to detect SQL injection risks, improper permissions, and data exposure.
  • Performance optimization through query structure, indexing, and join improvements.
  • Code quality and maintainability checks including naming, formatting, and schema design review.
  • Database-specific best practices and validation across major engines.

Quick Start

Analyze the following SQL snippet to identify vulnerabilities and optimization opportunities.

Frequently Asked Questions about sql-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check SQL code for security vulnerabilities and performance bottlenecks?

SQL code review detects SQL injection risks, improper permissions, and performance bottlenecks by analyzing query structures. It enforces parameterized queries and least-privilege access to secure and optimize database projects.

Does this SQL code review work with PostgreSQL and SQL Server?

Yes, SQL code review applies cross-engine compatibility checks across MySQL, PostgreSQL, SQL Server, and Oracle. It validates database-specific best practices and enforces consistent schema design for all these major database systems.

What is the best way to enforce consistent naming and maintainability in stored procedures?

The best way to enforce maintainability in stored procedures is running SQL code reviews that check naming conventions, formatting, and schema design. This ensures code quality and long-term maintainability across individual queries and database projects.

How do I detect SQL injection risks in my database queries?

Detect SQL injection risks by performing a security analysis through SQL code review. It identifies improper permissions, data exposure, and enforces parameterized queries to prevent injection attacks across MySQL, PostgreSQL, SQL Server, and Oracle.

Can I optimize indexing practices and join improvements for multiple database engines?

Yes, SQL code review optimizes performance by analyzing query structure, indexing practices, and join improvements across MySQL, PostgreSQL, SQL Server, and Oracle. It ensures cross-database compatibility and applies engine-specific best practices.